Re: So has anybody come up with a solution for certificate automation that will work on a Midrange box?

On 4/2/26 9:26 AM, Pete Helgren wrote:

The "getting the certificate" part is easy but the updating the keystore looks like the challenge.

Indeed. Our current manual process involves creating a KS in Keytool, on my Mac (every attempt I ever made to use Keytool on a Midrange box failed miserably), then generating a CSR in KeyStore Explorer (KSE), on my Mac, then using KSE to install the reply into the KS (and using "Save As" to avoid the very real possibility of polluting the original, if something goes wrong), then uploading the KS to the customer box, dropping Tomcat, switching the active KS, bringing Tomcat back up, and verifying that everything worked.

Mr. Schultz is of course, one of the top Tomcat gurus, and he's saved my butt on more than one occasion.

--
JHHL